capa-rules/host-interaction/process
Paul fa246a4a9b
terminate process with RestartMgr.RmShutdown (#1077)
* terminate process with RestartMgr.RmShutdown

* fix 'and' to 'api'
2025-09-23 14:17:49 -06:00
..
create add more APIs to remove use-process-replacement FNs (#1009) 2025-02-25 08:59:09 -07:00
dump fix call/thread scopes manually 2023-11-24 11:35:00 +01:00
inject remove FPs from allocate-or-change-rwx-memory.yml (#1027) 2025-03-18 08:01:36 -06:00
list Improve Accuracy of Various Detections (#1010) 2025-03-10 14:19:23 -06:00
modify new/updated rules from recent malware samples (#1063) 2025-08-12 10:21:05 -06:00
modules/list use "span of calls" scope (#973) 2025-01-29 10:27:13 +01:00
terminate terminate process with RestartMgr.RmShutdown (#1077) 2025-09-23 14:17:49 -06:00
get-process-filename.yml get-process-filename.yml: added reference, corrected structure element 2024-10-18 19:09:05 +00:00
get-process-heap-flags.yml fix call/thread scopes manually 2023-11-24 11:35:00 +01:00
get-process-heap-force-flags.yml fix call/thread scopes manually 2023-11-24 11:35:00 +01:00
map-section-object.yml use "span of calls" scope (#973) 2025-01-29 10:27:13 +01:00